This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft File: rS2L1OZ06M7VoJfUPepxhETnivU.mft (raw, json) Hash identifier: 0EWydPNmAQ4JTHnDzkQpQtEAfwCl2OGrcgfkx0ZDcmQ= Subject key identifier: D8:08:A6:68:BC:91:84:62:71:9B:6E:FC:49:31:CD:2C:65:E2:65:29 Authority key identifier: AD:2D:8B:D4:E6:74:E8:CE:D5:A0:97:D4:3D:EA:71:84:44:E7:8A:F5 Certificate issuer: /CN=ad2d8bd4e674e8ced5a097d43dea718444e78af5 Certificate serial: 019AF276BE40E99BBF08EF5B99224ED6A747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft Manifest number: 1432 Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: rS2L1OZ06M7VoJfUPepxhETnivU.crl (hash: t16KBVaysl/FDTWZKf/cJtXPBzUGiWJLonx/gz02dMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:be:40:e9:9b:bf:08:ef:5b:99:22:4e:d6:a7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2d8bd4e674e8ced5a097d43dea718444e78af5 Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=d808a668bc918462719b6efc4931cd2c65e26529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4c:6f:89:ac:fd:45:92:df:a4:1c:22:9f:7e: 84:9a:d7:11:8a:52:49:67:a9:dc:b5:7b:13:81:1e: 77:69:68:86:4a:93:7b:00:be:35:cf:7f:5e:db:e3: 86:cd:c2:64:6d:20:ad:1c:49:a3:5a:4e:1c:9a:df: c8:6d:c3:45:f5:8a:fb:27:09:29:a9:19:14:2b:04: 48:c8:38:7c:21:33:73:83:fa:c0:4b:e2:ef:15:30: cb:87:ce:8d:99:2b:9a:7a:13:60:2c:d5:10:05:11: 2e:87:60:5f:f4:7d:ae:eb:41:01:8d:df:d8:02:b0: 39:0b:f3:1b:97:9c:19:5d:3b:91:b4:5d:34:c5:e2: c1:cd:eb:35:60:39:cb:94:10:a4:47:75:61:4a:b0: 28:11:16:5c:3a:ea:82:93:58:92:7d:33:01:65:f9: 8a:cb:63:f1:0b:be:de:e3:12:9d:2d:ad:cf:12:8b: db:9b:ae:99:90:5d:2d:7f:a8:8d:fc:39:ee:0e:df: 73:b7:12:2d:cc:0f:e5:40:26:7e:ca:43:a9:31:91: 07:df:07:33:eb:db:42:b4:d8:f8:21:2b:70:5e:8d: 33:ce:6b:d3:4b:42:44:0b:34:b2:72:3d:6a:64:10: 6d:af:65:3f:92:ef:89:19:7c:66:d6:ce:2d:04:e8: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:08:A6:68:BC:91:84:62:71:9B:6E:FC:49:31:CD:2C:65:E2:65:29 X509v3 Authority Key Identifier: keyid:AD:2D:8B:D4:E6:74:E8:CE:D5:A0:97:D4:3D:EA:71:84:44:E7:8A:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:87:6b:6b:24:da:e0:9c:c2:0f:54:62:fa:a0:77:af:90:92: 9f:e3:5d:c4:ab:7b:89:ff:a8:d8:34:76:92:f5:72:d8:3e:ee: 39:89:50:ca:51:4a:60:6b:98:d8:24:c9:f1:38:95:54:65:09: ad:db:52:0a:03:5d:c0:b2:c6:04:76:28:59:a0:1e:c7:5c:8f: 93:7e:9b:bf:e1:14:5c:91:b5:37:2a:92:39:e0:56:c3:7a:8c: a9:9d:cd:bf:9a:0c:25:2d:ea:d5:95:7e:3a:b1:4d:2d:2a:b0: ea:71:d9:76:b2:0a:36:1b:f8:e8:ce:1a:a2:92:5d:2c:a0:11: ab:87:bc:1e:99:bb:37:e6:e3:55:b1:a2:a6:04:23:d3:16:f6: b3:dd:48:44:4f:b3:b3:e8:bc:ee:82:19:1d:d7:01:fe:9b:26: 80:e0:9f:f7:c7:2a:3b:48:8d:e3:49:86:af:17:b6:a1:c6:08: f5:32:f3:7a:e2:d0:f8:72:2b:b7:66:31:69:c9:77:af:fb:4e: 41:63:3c:7e:a9:fc:d4:3e:7c:a4:72:20:f3:ca:33:f5:83:5d: 2c:d3:68:f1:a5:d5:bd:01:53:da:31:19:55:69:05:bf:e7:80: ea:94:8f:74:38:95:db:3b:22:52:2b:e6:38:4d:5d:2f:c5:eb: 49:8a:57:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydr5A6Zu/CO9bmSJO1qdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmQ4YmQ0ZTY3NGU4Y2VkNWEwOTdkNDNkZWE3MTg0NDRl NzhhZjUwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD EyhkODA4YTY2OGJjOTE4NDYyNzE5YjZlZmM0OTMxY2QyYzY1ZTI2NTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Uxviaz9RZLfpBwin36EmtcRilJJ Z6nctXsTgR53aWiGSpN7AL41z39e2+OGzcJkbSCtHEmjWk4cmt/IbcNF9Yr7Jwkp qRkUKwRIyDh8ITNzg/rAS+LvFTDLh86NmSuaehNgLNUQBREuh2Bf9H2u60EBjd/Y ArA5C/Mbl5wZXTuRtF00xeLBzes1YDnLlBCkR3VhSrAoERZcOuqCk1iSfTMBZfmK y2PxC77e4xKdLa3PEovbm66ZkF0tf6iN/DnuDt9ztxItzA/lQCZ+ykOpMZEH3wcz 69tCtNj4IStwXo0zzmvTS0JECzSycj1qZBBtr2U/ku+JGXxm1s4tBOiKhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgIpmi8kYRicZtu/EkxzSxl4mUpMB8GA1UdIwQY MBaAFK0ti9TmdOjO1aCX1D3qcYRE54r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclMyTDFPWjA2TTdWb0pmVVBlcHhoRVRuaXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wODNmMjMtMjZlYy00MDMxLTg1M2Mt ODJmMTUxYjY2NGM1LzEvclMyTDFPWjA2TTdWb0pmVVBlcHhoRVRuaXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8wODNmMjMtMjZlYy00MDMxLTg1M2MtODJmMTUxYjY2NGM1 LzEvclMyTDFPWjA2TTdWb0pmVVBlcHhoRVRuaXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIdrayTa 4JzCD1Ri+qB3r5CSn+NdxKt7if+o2DR2kvVy2D7uOYlQylFKYGuY2CTJ8TiVVGUJ rdtSCgNdwLLGBHYoWaAex1yPk36bv+EUXJG1NyqSOeBWw3qMqZ3Nv5oMJS3q1ZV+ OrFNLSqw6nHZdrIKNhv46M4aopJdLKARq4e8Hpm7N+bjVbGipgQj0xb2s91IRE+z s+i87oIZHdcB/psmgOCf98cqO0iN40mGrxe2ocYI9TLzeuLQ+HIrt2Yxacl3r/tO QWM8fqn81D58pHIg88oz9YNdLNNo8aXVvQFT2jEZVWkFv+eA6pSPdDiV2zsiUivm OE1dL8XrSYpX7w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:23 2025 by rpki-client